https://pulse.adyog.com/insights/technical-debt-compounds-year5 https://pulse.adyog.com/static/img/stories/technical-debt-compounds-year5.png?v=20260610 Technical Debt Compounds: Year 1 Costs $4,200. Year 5 Costs $18,000. Legacy framework costs don't stay flat. Plugin compatibility breaks compound. Security patches accelerate. Hosting requirements grow. By year 5, you're paying 4x what you started with. https://pulse.adyog.com/insights/ten-million-sites-cost-math https://pulse.adyog.com/static/img/stories/ten-million-sites-cost-math.png?v=20260610 10 Million Sites: The Cost of Running 82.5% Legacy at Scale. 8.25 million legacy sites × $4,200-$38,000/year in total cost of ownership. The aggregate infrastructure bill for legacy web frameworks exceeds many countries' GDP. https://pulse.adyog.com/insights/legacy-tax-by-region https://pulse.adyog.com/static/img/stories/legacy-tax-by-region.png?v=20260610 The Legacy Tax by Region: Turkey Pays 93%, Hong Kong Pays 35%. WordPress concentration varies from 35% to 93% by country. Each percentage point is a maintenance cost multiplier. Some countries are paying 3x the infrastructure tax of others. https://pulse.adyog.com/insights/plugin-economy-hidden-tax https://pulse.adyog.com/static/img/stories/plugin-economy-hidden-tax.png?v=20260610 The Plugin Economy: A $10 Billion Tax Nobody Itemizes. 7.4 million WordPress sites. Average 20-30 plugins each. Every plugin requires updates, compatibility testing, and security monitoring. The aggregate cost is staggering — and invisible. https://pulse.adyog.com/insights/media-ai-readiness-content https://pulse.adyog.com/static/img/stories/media-ai-readiness-content.png?v=20260610 Media Companies Produce Content for a Living. Half of It Is Invisible to AI. Media is exactly split: 50% legacy, 50% modern. The half on WordPress produces content that AI agents waste tokens parsing. The half on Next.js produces content AI can consume instantly. https://pulse.adyog.com/insights/manufacturing-ai-readiness https://pulse.adyog.com/static/img/stories/manufacturing-ai-readiness.png?v=20260610 Manufacturing Runs Angular for Machines. Ironically, AI Machines Can't Read It. Angular powers manufacturing dashboards and industrial IoT interfaces. But Angular's client-rendered output is opaque to AI agents. The industrial web has an AI-readiness paradox. https://pulse.adyog.com/insights/education-ai-invisible https://pulse.adyog.com/static/img/stories/education-ai-invisible.png?v=20260610 Universities Built for Browsers Are Invisible to AI. That Affects Enrollment. Prospective students ask AI assistants about programs, costs, and campus life. Universities on Drupal and Rails give AI agents unstructured noise. The enrollment pipeline has a framework problem. https://pulse.adyog.com/insights/ecommerce-ai-agents-shopping https://pulse.adyog.com/static/img/stories/ecommerce-ai-agents-shopping.png?v=20260610 AI Agents Are Learning to Shop. Can They Buy From You? 2.3% of agentic AI activity now occurs on checkout pages. Autonomous transactions without a human in the loop. If your product pages are WordPress noise, the AI shopper goes elsewhere. https://pulse.adyog.com/insights/government-ai-readiness-gap https://pulse.adyog.com/static/img/stories/government-ai-readiness-gap.png?v=20260610 Citizens Will Ask AI About Government Services. Most Government Sites Can't Answer. 53% of government sites run Drupal (AI-Readiness: 40/100). When AI agents become the primary interface to public services, most government information will be unreadable. https://pulse.adyog.com/insights/healthcare-ai-readiness-crisis https://pulse.adyog.com/static/img/stories/healthcare-ai-readiness-crisis.png?v=20260610 When an AI Agent Checks Your Hospital's Website, It Sees Noise. Healthcare AI-readiness score: 38/100. In a world where AI agents schedule appointments, compare providers, and verify insurance — your hospital's WordPress site is invisible. https://pulse.adyog.com/insights/angular-enterprise-migration https://pulse.adyog.com/static/img/stories/angular-enterprise-migration.png?v=20260610 Angular in the Enterprise: The Quiet Migration Nobody Talks About. Angular holds 1.6% of the web — 165,015 detected sites. Enterprise telecom and manufacturing depend on it. But Angular's migration story is different from WordPress. https://pulse.adyog.com/insights/migration-roi-by-industry https://pulse.adyog.com/static/img/stories/migration-roi-by-industry.png?v=20260610 Migration ROI by Industry: Healthcare Saves Most, Education Waits Longest. We modeled the 5-year cost of staying vs. migrating for 13 industries. The numbers surprise nobody who's done the math. https://pulse.adyog.com/insights/legacy-to-modern-82-percent-gap https://pulse.adyog.com/static/img/stories/legacy-to-modern-82-percent-gap.png?v=20260610 82.5% of 10 Million Sites Are Legacy. The Migration Decade Starts Now. WebPulse scanned 10,002,735 sites. 8,250,594 run legacy frameworks. 1,752,141 run modern. The gap is the defining infrastructure challenge of this decade. https://pulse.adyog.com/insights/eu-gdpr-forces-migration https://pulse.adyog.com/static/img/stories/eu-gdpr-forces-migration.png?v=20260610 GDPR Was Supposed to Force Migration. 7 Years Later, Legacy Won. The EU's data protection law created the world's strictest compliance regime. European websites are still 75%+ legacy. The regulation didn't change the infrastructure. https://pulse.adyog.com/insights/india-migration-opportunity https://pulse.adyog.com/static/img/stories/india-migration-opportunity.png?v=20260610 India: 69% WordPress Creates the World's Largest Migration Opportunity. 1.4 billion people online. 69% of detected sites on WordPress. A digital economy growing at 10% annually on infrastructure from 2005. https://pulse.adyog.com/insights/ecommerce-headless-migration https://pulse.adyog.com/static/img/stories/ecommerce-headless-migration.png?v=20260610 E-commerce Migration: Magento/WooCommerce to Headless Is a 63x Cost Reduction. Shopify already ate Drupal. Headless commerce is eating everything else. The migration math favors moving today, not next year. https://pulse.adyog.com/insights/education-migration-gap https://pulse.adyog.com/static/img/stories/education-migration-gap.png?v=20260610 Education Is the Slowest Sector to Modernize. It Has the Most to Lose. Universities run Drupal and Rails — good choices in 2012. The web moved. They didn't. FERPA-protected student data sits on 15-year-old architecture. https://pulse.adyog.com/insights/government-migration-math https://pulse.adyog.com/static/img/stories/government-migration-math.png?v=20260610 53% of Government Sites Run Drupal. Drupal 7 EOL'd in January. The US federal government spent $100 billion on IT in 2025. A meaningful percentage of that maintains frameworks that stopped receiving security patches. https://pulse.adyog.com/insights/fintech-already-migrated https://pulse.adyog.com/static/img/stories/fintech-already-migrated.png?v=20260610 Fintech Already Migrated. Here's What They Know That You Don't. 100% of top fintech companies run modern stacks. 0% run WordPress. The migration already happened in the industry that can't afford to get hacked. https://pulse.adyog.com/insights/healthcare-migration-imperative https://pulse.adyog.com/static/img/stories/healthcare-migration-imperative.png?v=20260610 Healthcare Runs on WordPress and Drupal. HIPAA Doesn't Care. The typical healthcare web stack scores 37/100 on security. The recommended stack scores 87/100. The compliance gap is a lawsuit waiting to happen. https://pulse.adyog.com/insights/lighthouse-scores-agent-readiness https://pulse.adyog.com/static/img/stories/lighthouse-scores-agent-readiness.png?v=2 Google Just Added an AI Agent Score to Lighthouse. WebPulse Was Already Measuring It. Lighthouse 13.3 ships an 'Agentic Browsing' audit category — checking llms.txt, WebMCP, accessibility tree, layout stability. Google just formalized what WebPulse has been scoring since launch. Agent readiness is now an official web standard. https://pulse.adyog.com/insights/hades-fights-back-prompt-injection https://pulse.adyog.com/static/img/stories/hades-fights-back-prompt-injection.png?v=2 The Malware That Fights Back: Hades Uses Prompt Injection Against AI Security Scanners The Hades variant of the Shai-Hulud worm family includes adversarial prompt injection in its payload — fake JavaScript comments designed to confuse AI-powered security tools. Supply chain malware is now attacking the scanners, not just the developers. https://pulse.adyog.com/insights/flippa-plugin-backdoor https://pulse.adyog.com/static/img/stories/flippa-plugin-backdoor.png?v=2 Buy the Plugin, Own the Sites: 30 WordPress Plugins Bought on Flippa and Backdoored An attacker purchased 30+ WordPress plugins with 400,000 combined installations on a digital marketplace. Dormant for 8 months. Activated April 2026. WordPress has no mechanism to review plugin ownership transfers. https://pulse.adyog.com/insights/drupal-safe-one-wasnt https://pulse.adyog.com/static/img/stories/drupal-safe-one-wasnt.png?v=2 Drupal Was the Safe One. Then CVE-2026-9082 Hit CISA KEV. CVSS 9.8. Unauthenticated SQL injection in Drupal Core. Added to CISA KEV two days after disclosure. 15,000 attacks across 65 countries. The CMS governments chose for security just got its own critical core flaw. https://pulse.adyog.com/insights/wordpress-7-ai-key-honeypot https://pulse.adyog.com/static/img/stories/wordpress-7-ai-key-honeypot.png?v=2 WordPress 7.0 Shipped an AI Agent Platform. Hackers Got the Keys on Day Two. WordPress 7.0 'Armstrong' added a Connectors API that stores Anthropic, Google, and OpenAI keys in wp_options. Patchstack's founder called it 'free AI tokens for hackers.' AI scanning found 300+ zero-days at $20 each in 72 hours. SiteGround pushed 1M+ installs automatically. https://pulse.adyog.com/insights/dead-internet-arrived-early https://pulse.adyog.com/static/img/stories/dead-internet-arrived-early.png?v=2 57.5%: The Dead Internet Arrived 18 Months Early Cloudflare confirmed it. More than half of web traffic is now bots. AI scrapers are crushing small sites. Google referral traffic down 38%. The web built for humans is being consumed by machines — and site owners are paying the hosting bill. https://pulse.adyog.com/insights/wordpress-june-massacre https://pulse.adyog.com/static/img/stories/wordpress-june-massacre.png?v=2 June 2026: Six CVSS 9.8 Vulnerabilities. 1.14 Million WordPress Sites. Six critical vulnerabilities actively exploited at the same time. 29,300+ attacks per day on one plugin alone. A premium plugin supply-chain compromised. The WordPress security model hit a wall. https://pulse.adyog.com/insights/worm-that-learned-to-jump https://pulse.adyog.com/static/img/stories/worm-that-learned-to-jump.png?v=2 The Worm That Learned to Jump: npm → PyPI → Your IDE in 9 Days June 1: npm packages. June 3: new evasion technique. June 5: IDE config poisoning. June 7: PyPI. The Shai-Hulud supply chain worm crossed three attack surfaces in nine days. 448 artifacts. The security industry couldn't keep up. https://pulse.adyog.com/insights/trustfall-coding-agents-one-click-rce https://pulse.adyog.com/static/img/stories/trustfall-coding-agents-one-click-rce.png?v=20260609 TrustFall, SymJack, Clinejection: Every AI Coding Agent Is Hackable TrustFall: one-click RCE. SymJack: symlink hijack installs attacker MCP servers. Clinejection: a GitHub issue title compromised 4,000 developers. Claude Code leaked its source — three CVEs fell out. The tools building the web are its newest attack surface. https://pulse.adyog.com/insights/npm-worm-wave-2026 https://pulse.adyog.com/static/img/stories/npm-worm-wave-2026.png?v=20260609 The npm Worm Wave: 30+ Supply Chain Attacks in 6 Months One supply chain attack is an incident. Thirty in six months is a market condition. The worm crossed to PyPI. The source code went public. Here's the timeline. https://pulse.adyog.com/insights/both-supply-chains-are-broken https://pulse.adyog.com/static/img/stories/both-supply-chains-are-broken.png?v=20260609 Both Supply Chains Are Broken: WordPress Plugins vs. npm Packages in 2026 WordPress has 18,005 catalogued CVEs and six CVSS 9.8 vulnerabilities exploited simultaneously. The npm ecosystem had 30+ supply chain attacks in 6 months — and the worm jumped to PyPI. Neither is safe. The difference is how the risk kills you. https://pulse.adyog.com/insights/mcp-protocol-no-security-model https://pulse.adyog.com/static/img/stories/mcp-protocol-no-security-model.png?v=20260608 200,000 Open Doors: The Protocol Connecting AI Agents Has No Security Model MCP — the Model Context Protocol — is the TCP/IP of agentic AI. 200,000+ vulnerable instances. 150 million package downloads. The Pentagon designated its creator a supply chain risk. The NSA published an advisory. The infrastructure of the machine web is wide open. https://pulse.adyog.com/insights/slsa-provenance-forged-miasma https://pulse.adyog.com/static/img/stories/slsa-provenance-forged-miasma.png?v=20260608 SLSA Can't Save You: Miasma Forged the Gold Standard for Supply Chain Integrity SLSA provenance was supposed to be the answer to supply chain attacks. Miasma forged it. 32 Red Hat packages, 90+ malicious versions, perfect provenance attestations. The trust framework is broken. https://pulse.adyog.com/insights/coding-agents-chose-modern https://pulse.adyog.com/static/img/stories/coding-agents-chose-modern.png?v=20260607 The Coding Agents Already Chose: What AI Builds the Web On Cursor, Claude Code, GitHub Copilot — the AI coding agents writing most new web code overwhelmingly generate React, Next.js, FastAPI, and Astro. Not WordPress. Not PHP. The migration is being decided by machines. https://pulse.adyog.com/insights/chinese-models-45-percent-of-tokens https://pulse.adyog.com/static/img/stories/chinese-models-45-percent-of-tokens.png?v=20260607 Chinese AI Models Process 45% of the World's Tokens. A Year Ago It Was 2%. DeepSeek-V4-Flash tops OpenRouter's global rankings at 3.43 trillion tokens per week. MiniMax, Kimi, Qwen follow. The AI model market followed the same cost-driven adoption curve as WordPress. The concentration risks may follow too. https://pulse.adyog.com/insights/three-industries-95-percent-ai-traffic https://pulse.adyog.com/static/img/stories/three-industries-95-percent-ai-traffic.png?v=20260607 Three Industries Get 95% of AI Traffic. Is Their Infrastructure Ready? Retail, streaming, and travel receive 95%+ of all AI agent traffic. Financial services agentic traffic doubled in May 2026 alone. WebPulse data shows what frameworks these industries run — and the gap between AI demand and infrastructure readiness. https://pulse.adyog.com/insights/ai-agents-visit-1000x-more-pages https://pulse.adyog.com/static/img/stories/ai-agents-visit-1000x-more-pages.png?v=20260607 AI Agents Visit 1,000x More Pages Than You Do. Your Hosting Bill Knows. A human searches 4-5 pages. An AI agent searches 5,000. When your majority visitor generates 1,000x more requests, your framework's output weight becomes an infrastructure cost, not a performance metric. https://pulse.adyog.com/insights/machine-builds-browses-attacks https://pulse.adyog.com/static/img/stories/machine-builds-browses-attacks.png?v=20260607 Machine Builds. Machine Browses. Machine Attacks. Welcome to the 2026 Web. AI coding agents build the web. AI browsing agents consume it (57.5%). AI attack agents exploit it (20+ supply chain attacks). AI defense agents protect it. Humans are spectators. The web is now machine-to-machine infrastructure. https://pulse.adyog.com/insights/100-trillion-tokens-parallel-web https://pulse.adyog.com/static/img/stories/100-trillion-tokens-parallel-web.png?v=20260607 100 Trillion Tokens a Month: The Parallel Web Nobody's Measuring OpenRouter processes 25 trillion tokens per week. 100 trillion per month. 5x growth in 6 months. A token economy is running alongside HTTP — and your framework determines whether you're part of it. https://pulse.adyog.com/insights/57-percent-and-counting https://pulse.adyog.com/static/img/stories/57-percent-and-counting.png?v=20260607 57.5% Bots. 42.6% Humans. The Crossover Accelerated. We reported 53% in our Cloudflare analysis. HUMAN Security's June 2026 data says 57.5%. In North America it's 68.6%. Agentic traffic grew 7,851% year-over-year. The web left humans behind faster than anyone predicted. https://pulse.adyog.com/insights/static-sites-not-getting-owned https://pulse.adyog.com/static/img/stories/static-sites-not-getting-owned.png?v=20260607 Static Sites: The Only Framework Category Not Getting Owned in 2026 Hugo: 0 CVEs, 0 plugins, 0 npm runtime dependencies, 0 supply chain attacks. In a year where both WordPress and npm ecosystems are under siege, static generators are the quiet winners. https://pulse.adyog.com/insights/cicd-kill-chain https://pulse.adyog.com/static/img/stories/cicd-kill-chain.png?v=20260607 The CI/CD Kill Chain: From npm Install to Cloud Admin in 72 Hours A single compromised npm package gave attackers AWS admin access in three days. The deployment pipeline that makes modern frameworks possible is the attack surface nobody secured. https://pulse.adyog.com/insights/nation-states-in-your-node-modules https://pulse.adyog.com/static/img/stories/nation-states-in-your-node-modules.png?v=20260607 Nation-States Are in Your node_modules North Korean group UNC1069 compromised Axios — downloaded 40 million times per week. When intelligence agencies target your build pipeline, npm audit is not a security strategy. https://pulse.adyog.com/insights/ai-tools-are-the-new-attack-surface https://pulse.adyog.com/static/img/stories/ai-tools-are-the-new-attack-surface.png?v=20260607 Your AI Coding Assistant Is a Target: The Supply Chain Attacks Nobody Expected IronWorm steals credentials for Claude, Codex, Gemini, and Cursor. A malicious npm package exfiltrated Claude's local files. The tools building the modern web are under attack. https://pulse.adyog.com/insights/accessibility-gap-by-framework https://pulse.adyog.com/static/img/stories/accessibility-gap-by-framework.png?v=20260601 The Accessibility Gap by Framework. Modern HTML Is More Accessible by Default. 96.3% of home pages have accessibility errors. Modern frameworks with semantic HTML defaults produce fewer violations by architecture. The accessibility case for modern frameworks that nobody is measuring. https://pulse.adyog.com/insights/dns-tells-the-story https://pulse.adyog.com/static/img/stories/dns-tells-the-story.png?v=20260601 The DNS Tells the Story. Netlify DNS = Modern. Shared Hosting = WordPress. The DNS provider is a proxy for the entire technology stack. Netlify/Vercel DNS predicts Jamstack. GoDaddy/Bluehost predicts WordPress. A new detection dimension hiding in plain sight. https://pulse.adyog.com/insights/supply-chain-map-plugins https://pulse.adyog.com/static/img/stories/supply-chain-map-plugins.png?v=20260601 The Supply Chain Map. WordPress Has 60,000 Plugins. Each One Is a Trust Decision. WordPress: 60,000 plugins, ~40% abandoned. npm (React/Next.js): millions of packages but lockfile-controlled and auditable. The supply chain model is fundamentally different — and our country data shows who bears the deepest exposure. https://pulse.adyog.com/insights/carbon-footprint-of-legacy https://pulse.adyog.com/static/img/stories/carbon-footprint-of-legacy.png?v=20260601 The Carbon Footprint of Legacy. WordPress Serves Every Page Through PHP. Astro Serves Static Files. WordPress: PHP + MySQL on every request. Astro: static CDN delivery. At 7.4M WordPress sites serving billions of pages daily, the carbon difference between legacy and modern is measurable. The sustainability case nobody is making. https://pulse.adyog.com/insights/ai-training-data-wordpress-shaped https://pulse.adyog.com/static/img/stories/ai-training-data-wordpress-shaped.png?v=20260601 74% of AI Training Data Comes From WordPress. What Does That Mean for AI Quality? AI models are trained on web crawls. 74% of the crawlable web is WordPress. That means AI training corpora are shaped by template repetition, plugin artifacts, and SEO-optimized filler. The web that shaped AI was shaped by WordPress. https://pulse.adyog.com/insights/compliance-cost-multiplier https://pulse.adyog.com/static/img/stories/compliance-cost-multiplier.png?v=20260601 The Compliance Cost Multiplier. Legacy Frameworks Correlate With Higher Regulatory Fines. GDPR fines: EUR4.5B+ cumulative. Healthcare breach cost: $10.9M average. The sectors with the highest fines are the sectors with the most legacy infrastructure. Correlation isn't causation — but the pattern demands attention. https://pulse.adyog.com/insights/generation-gap-developers https://pulse.adyog.com/static/img/stories/generation-gap-developers.png?v=20260601 The Generation Gap. Countries With Young Developers Build Modern. Countries With Old Developers Maintain Legacy. Japan (median developer age ~42): 87% WordPress. India (median ~26): fintech 100% modern, broad web 83% WP. The workforce age predicts the framework. The developer pipeline IS the framework pipeline. https://pulse.adyog.com/insights/framework-economic-indicator https://pulse.adyog.com/static/img/stories/framework-economic-indicator.png?v=20260601 Framework Choice as Economic Indicator. Modern Adoption Maps to GDP. High-GDP tech hubs modernize fastest. Aid-dependent economies follow institutional Drupal. Middle-income countries default to WordPress freelance economics. The framework map IS the economic map. https://pulse.adyog.com/insights/website-outlives-business https://pulse.adyog.com/static/img/stories/website-outlives-business.png?v=20260601 The Website That Outlives the Business. Legacy Infrastructure Without an Owner. How many of the 7.4M WordPress sites are for businesses that no longer exist? Domains persist, plugins accumulate CVEs, and nobody patches. The web's biggest security problem isn't active sites — it's ghost sites. https://pulse.adyog.com/insights/dead-internet-quantified https://pulse.adyog.com/static/img/stories/dead-internet-quantified.png?v=20260601 The Dead Internet, Quantified. 53% Bots. 74% WordPress. 18,005 CVEs. The Web Is a Zombie. The 'dead internet theory' isn't a conspiracy — it's a measurement. Most of the web is unmaintained WordPress crawled by bots that outnumber humans. Three independent datasets converge on one conclusion: the living web is a thin film on a vast digital graveyard. https://pulse.adyog.com/insights/ai-crawlers-4-percent-of-web https://pulse.adyog.com/static/img/stories/ai-crawlers-4-percent-of-web.png?v=20260601 AI Crawlers Are 4.2% of All Web Requests. Your Framework Determines What They See. GPTBot, ClaudeBot, Google-Extended — AI crawlers now generate 4.2% of all HTML requests. On a WordPress site, they parse 2,000 lines of noise. On an Astro site, they parse 50 lines of content. https://pulse.adyog.com/insights/wordpress-74-vs-cloudflare-47 https://pulse.adyog.com/static/img/stories/wordpress-74-vs-cloudflare-47.png?v=20260601 We Found 74% WordPress. Cloudflare Found 47%. Both Are Right. The Gap Is the Story. Our 10M broad-web scan: 74.3% WordPress. Cloudflare's top-site scan: 47%. The 27-point gap is the long tail — and it proves the Two Webs thesis with external validation. https://pulse.adyog.com/insights/more-bots-than-humans https://pulse.adyog.com/static/img/stories/more-bots-than-humans.png?v=20260601 More Bots Than Humans. The Web We Built Is No Longer For Us. 53% of web traffic is now automated. Humans are the minority. Cloudflare processes 81M+ requests per second and confirms: bots won. The question is whether your infrastructure was built for the winners. https://pulse.adyog.com/insights/the-web-that-ai-inherits https://pulse.adyog.com/static/img/stories/the-web-that-ai-inherits.png?v=20260601 The Web That AI Inherits: 74.3% WordPress, 18,005 CVEs, 10 Million Sites Deep. AI agents are the new browsers. They're inheriting a web where 3 out of 4 sites run legacy CMS, the dominant framework has 4 active exploits, and modern infrastructure is 5% of the total. This is what AI has to work with. https://pulse.adyog.com/insights/ai-agents-can-manage-wordpress-not-fix-it https://pulse.adyog.com/static/img/stories/ai-cant-talk-to-legacy.png?v=20260601 AI Agents Can Manage WordPress. They Still Can't Fix Its Architecture. WordPress MCP is real. AI can now patch plugins, manage updates, and monitor security. But 18,005 CVEs don't disappear because a bot is watching them. The maintenance cost shrinks. The structural risk doesn't. https://pulse.adyog.com/insights/htmx-surpassed-gatsby-sveltekit https://pulse.adyog.com/static/img/stories/htmx-surpassed-gatsby-sveltekit.png?v=20260601 HTMX Surpassed Gatsby and SvelteKit. 11,482 Sites at 10M. HTMX: 11,482. Gatsby: 10,133. SvelteKit: 8,682. The anti-framework now has more detected sites than two of the most-hyped modern frameworks. No build step, no npm, no conference — and more real-world presence. https://pulse.adyog.com/insights/ten-million-sites-scanned https://pulse.adyog.com/static/img/stories/ten-million-sites-scanned.png?v=20260601 10 Million Sites Scanned. Here's What the Web Actually Looks Like. 10,002,735 detections. WordPress 74.3%. Shopify 7.8%. Drupal 4.5%. Joomla 3.5%. Next.js 2.6%. 929 TLDs. 74 countries. The deeper you scan, the more legacy you find. https://pulse.adyog.com/insights/japan-htmx-127k-confirmed https://pulse.adyog.com/static/img/stories/japan-htmx-127k-confirmed.png?v=20260601 Japan at 127K: HTMX Confirmed at 1,672 Sites. The Anti-Framework Found Its Culture. .jp: 126,788 detected. WordPress 84%, HTMX 1.3% (1,672 sites), Shopify 4%, Rails 1%. At scale, Japan's HTMX adoption is no longer a small-sample curiosity. https://pulse.adyog.com/insights/russia-238k-deepest-dataset https://pulse.adyog.com/static/img/stories/russia-238k-deepest-dataset.png?v=20260601 Russia at 238,000 Detections: Our Deepest Country Dataset. Next.js at 5.7% — Higher Than Germany. .ru: 238,055 detected. WordPress 68%, Joomla 11.5% (27,374 sites), Drupal 5.9%, Next.js 5.7%, Angular 3.3%, Vue 1.4%. Russia's Joomla count alone exceeds most countries' total detections. https://pulse.adyog.com/insights/south-africa-squarespace-capital https://pulse.adyog.com/static/img/stories/south-africa-squarespace-capital.png?v=20260601 South Africa: 4.3% Squarespace. The Highest Squarespace Rate on Earth. .za: 18,545 detected. WordPress 75%, Shopify 12%, Squarespace 4.3%, Drupal 3.4%, Angular 2.1%. Africa's most developed digital economy is 17% platform. https://pulse.adyog.com/insights/ukraine-web-persists https://pulse.adyog.com/static/img/stories/ukraine-web-persists.png?v=20260601 Ukraine: 18% Modern, 12% Joomla, 6% Angular. A Web That Persists Through Conflict. .ua: 33,568 detected. WordPress 61%, Joomla 12%, Drupal 8.5%, Angular 6%, Next.js 5.5%. Despite everything, Ukraine's web infrastructure is among the most diverse in Eastern Europe. https://pulse.adyog.com/insights/platforms-ate-drupal https://pulse.adyog.com/static/img/stories/platforms-ate-drupal.png?v=20260601 Platforms Are Now 2.4x Drupal. Subscribe Beat Build. Shopify + Wix + Squarespace combined: 822,717 detections (9.8% of detected). Drupal: 344,003 (4.1%). Ratio: 2.4x. Organizations stopped choosing between CMS options and chose 'don't manage infrastructure at all.' https://pulse.adyog.com/insights/uruguay-drupal-latam-outlier https://pulse.adyog.com/static/img/stories/uruguay-drupal-latam-outlier.png?v=20260601 Uruguay: 21% Drupal. Latin America's Development Funding Outlier. Brazil 86% WP, Argentina 86% WP, Colombia 55% WP. Uruguay breaks the LATAM WordPress pattern with 21% Drupal — the development funding corridor extends to Latin America. https://pulse.adyog.com/insights/nextjs-won-without-conference https://pulse.adyog.com/static/img/stories/nextjs-won-without-conference.png?v=20260601 Next.js: 242,905 Detections. The Framework That Won Without a Conference. No 'NextConf.' No branded swag culture. Yet 242,905 detections — #4 overall, #1 modern. More than Angular, React, Vue, and Nuxt combined. The framework that won by being the obvious choice. https://pulse.adyog.com/insights/algeria-angular-enterprise https://pulse.adyog.com/static/img/stories/algeria-angular-enterprise.png?v=20260601 Algeria: 16% Angular. North Africa's Enterprise JavaScript Signal. 987 detected .dz sites. WordPress 69%, Angular 16%, Joomla 8%, Next.js 5.5%. Algeria joins the global Angular enterprise belt — a directional signal from North Africa's institutional web. https://pulse.adyog.com/insights/switzerland-richest-country-wordpress https://pulse.adyog.com/static/img/stories/switzerland-richest-country-wordpress.png?v=20260601 Switzerland: The Richest Country in Europe Runs 63% WordPress. GDP per capita of $100K+. Precision engineering, banking, pharma. And 63% WordPress across 23,268 detected sites. Wealth doesn't automatically buy modern infrastructure. https://pulse.adyog.com/insights/balkans-joomla-belt https://pulse.adyog.com/static/img/stories/balkans-joomla-belt.png?v=20260601 The Balkans Run Joomla. The Rest of Europe Forgot It Existed. Croatia 9%, Serbia 9%, Slovenia 7%, North Macedonia 6%, Bosnia 3%. While Western Europe moved past Joomla years ago, the Balkans still carry significant Joomla infrastructure. https://pulse.adyog.com/insights/new-zealand-41-percent-shopify https://pulse.adyog.com/static/img/stories/new-zealand-41-percent-shopify.png?v=20260601 New Zealand: 41% Shopify. The Highest Shopify Rate on Earth. 10,684 detected .nz sites. 41% Shopify. 52% WordPress. Nearly half the detectable New Zealand web runs on one ecommerce platform — beating Australia, Pakistan, and every other country TLD. https://pulse.adyog.com/insights/social-tld-36-percent-django https://pulse.adyog.com/static/img/stories/social-tld-36-percent-django.png?v=20260601 .social Is 36% Django. Social Platforms Chose Python. The TLD for social platforms and communities runs 36% Django — the highest Django rate of any TLD. When building social features, developers reach for Python. https://pulse.adyog.com/insights/73-percent-immovable-number https://pulse.adyog.com/static/img/stories/73-percent-immovable-number.png?v=20260601 We Said 73% Was Immovable. At 10 Million Sites, It Went Up to 74.3%. The Web Is Even More Legacy Than We Reported. From 2M to 8.4M, WordPress held at exactly 73%. Then the long tail showed up. At 10M, legacy frameworks gained share. The deeper you scan, the more WordPress you find. https://pulse.adyog.com/insights/vue-hidden-empire-niche-tlds https://pulse.adyog.com/static/img/stories/vue-hidden-empire-niche-tlds.png?v=20260601 Vue's Hidden Empire: 75% of .lol, 39% of .xyz, 27% of .to. The Framework Nobody Talks About Dominates Where You're Not Looking. React and Next.js get the conference talks. Vue quietly built a 41% share on .xyz — the Web3/crypto TLD with 15,330 detected sites. The framework map has a shadow layer. https://pulse.adyog.com/insights/kenya-vs-nigeria https://pulse.adyog.com/static/img/stories/kenya-vs-nigeria.png?v=20260601 Kenya vs Nigeria: Same Continent, Different Web. Kenya Has Shopify. Nigeria Has Only WordPress. Kenya: 1,849 detected, WP 82%, Shopify 7.5%. Nigeria: 2,954 detected, WP 97%. Same continent, opposite digital paths. https://pulse.adyog.com/insights/dominican-republic-angular https://pulse.adyog.com/static/img/stories/dominican-republic-angular.png?v=20260601 Dominican Republic: 15% Angular. The Caribbean Enterprise Signal Nobody Expected. 1,328 detected .do sites. WordPress is 71%, but Angular at 15% is the second-highest Angular rate in the Americas. Caribbean enterprise infrastructure on Angular. https://pulse.adyog.com/insights/kyrgyzstan-angular-django https://pulse.adyog.com/static/img/stories/kyrgyzstan-angular-django.png?v=20260601 Kyrgyzstan: 19% Angular, 12% Django. Central Asia Runs Enterprise Python. 1,002 detected .kg sites. WordPress is 59%, but 19% Angular and 12% Django make Kyrgyzstan the world's highest Django adoption rate. Central Asia is more modern than Western Europe. https://pulse.adyog.com/insights/estonia-digital-society-wordpress-reality https://pulse.adyog.com/static/img/stories/estonia-digital-society-wordpress.png?v=20260601 Estonia: The World's Most Digital Society Runs 71% WordPress. E-residency, digital ID, paperless government. Estonia's digital reputation is legendary. Its broad web infrastructure tells the same story as Sweden. https://pulse.adyog.com/insights/app-tld-13-percent-astro https://pulse.adyog.com/static/img/stories/app-tld-13-percent-astro.png?v=20260601 .app Is 13% Astro. The PWA Crowd Chose Static-First. The TLD Google created for web applications is 13% Astro, 21% Next.js, 48% WordPress. The developers building 'apps' chose the framework that ships the least JavaScript. https://pulse.adyog.com/insights/uae-magento-capital https://pulse.adyog.com/static/img/stories/uae-magento-capital.png?v=20260601 UAE Is the Magento Capital of the World. Gulf Ecommerce Runs on Adobe Legacy. 5.4% Magento on .ae domains — the highest rate of any country. Alongside 6.7% Next.js and 3.4% Angular, UAE has the most enterprise-ecommerce web we've measured. https://pulse.adyog.com/insights/gg-gaming-tld-75-modern https://pulse.adyog.com/static/img/stories/gg-gaming-tld-75-modern.png?v=20260601 .gg Is 75% Modern. Nuxt.js Leads at 33%. The Gaming Community Built Different. The TLD adopted by gaming communities runs 33% Nuxt.js, 17% Angular, 17% Rails. WordPress is only 25%. Gamers chose the stack gamers would choose. https://pulse.adyog.com/insights/shopify-eating-drupal-globally https://pulse.adyog.com/static/img/stories/shopify-eating-drupal-globally.png?v=20260601 Shopify Has 5-15x More Sites Than Drupal in Every English-Speaking Market. Platform Ate Framework. Australia: Shopify 31% vs Drupal 2%. UK: 17% vs 3%. Canada: 20% vs 3%. The 'platform > framework' thesis confirmed across every market we measured. https://pulse.adyog.com/insights/tld-personality-test https://pulse.adyog.com/static/img/stories/tld-personality-test.png?v=20260601 Your TLD Reveals Your Framework. The Data Proves It. .blog is 99% WordPress. .dev is 54% Next.js. .store is 59% Shopify. .gov is 49% Drupal. The TLD you chose predicts your entire technology stack. https://pulse.adyog.com/insights/development-funding-shaped-the-web https://pulse.adyog.com/static/img/stories/development-funding-shaped-the-web.png?v=20260601 The Development Dollar Framework: How UNDP and World Bank Shaped South Asia and Africa's Web. Nepal 64% Drupal. Bangladesh 63%. Libya 42%. Ecuador 40%. Ivory Coast 37%. Uganda 31%. The framework map is the aid map. https://pulse.adyog.com/insights/htmx-found-its-home-in-japan https://pulse.adyog.com/static/img/stories/htmx-found-its-home-in-japan.png?v=20260601 HTMX Found Its Home in Japan. 487 Detections — More Than Any Country Except .com. The anti-framework quietly took root in Japan. 1.5% of detected .jp sites run HTMX. And the Basque Country (.eus) has 10% HTMX adoption. https://pulse.adyog.com/insights/thailand-joomla-capital https://pulse.adyog.com/static/img/stories/thailand-joomla-capital.png?v=20260601 Thailand Is 21% Joomla. The Highest Joomla Rate of Any Country. Nobody Knew. Russia (12%), Germany (8%), Greece (11%) — the known Joomla markets. Thailand at 21% is the surprise nobody saw coming. https://pulse.adyog.com/insights/nepal-66-percent-drupal https://pulse.adyog.com/static/img/stories/nepal-66-percent-drupal.png?v=20260601 Nepal Is 66% Drupal. Not WordPress. The South Asia Outlier Nobody Expected. India is 83% WordPress. Pakistan is 63% WordPress. Nepal chose Drupal. 351 Drupal sites vs 165 WordPress. Something institutional happened here. https://pulse.adyog.com/insights/hong-kong-most-diverse-web https://pulse.adyog.com/static/img/stories/hong-kong-most-diverse-web.png?v=20260601 Hong Kong Has the Most Diverse Web on Earth. Six Frameworks Above 5%. Only 28% WordPress. 28% Drupal. 16% Shopify. 10% Rails. 7% Angular. 6% React. No other country comes close to this framework diversity. https://pulse.adyog.com/insights/dev-domains-developers-choose-modern https://pulse.adyog.com/static/img/stories/dev-domains-developers-choose-modern.png?v=20260601 .dev Is 54% Next.js, 12% Astro. When Developers Choose for Themselves, They Choose Modern. The TLD developers buy for personal projects and side hustles. No client requests, no procurement defaults. Pure developer preference. https://pulse.adyog.com/insights/nigeria-100-percent-wordpress https://pulse.adyog.com/static/img/stories/nigeria-100-percent-wordpress.png?v=20260601 Nigeria Is 97% WordPress. 2,954 Sites. Essentially Zero Alternatives. Africa's largest economy, 220 million people, the continent's biggest tech ecosystem. 97% of detected sites run WordPress. Not 93% like Turkey. Near-total monoculture at scale. https://pulse.adyog.com/insights/edu-drupal-rails-confirmed-scale https://pulse.adyog.com/static/img/stories/edu-drupal-rails-confirmed-scale.png?v=20260601 .edu at 58,182 Detections: Drupal 35.7%, Rails 16.4%. Academia Fully Mapped. The largest .edu dataset ever published. Education remains the most framework-diverse sector. Rails at 16.4% — 9,568 sites — is the finding nobody expected. https://pulse.adyog.com/insights/czech-republic-sveltekit-hub https://pulse.adyog.com/static/img/stories/czech-republic-sveltekit-hub.png?v=20260601 Czech Republic: Europe's SvelteKit Hub. 6% of Detected .cz Sites Run It. The highest SvelteKit adoption rate of any country. Plus 6.5% Angular. Central European dev culture is more diverse than the WordPress default. https://pulse.adyog.com/insights/gov-drupal-53-percent-confirmed https://pulse.adyog.com/static/img/stories/gov-drupal-53-percent-confirmed.png?v=20260601 .gov Is 49% Drupal. Government's Framework Choice Confirmed at 12,467 Sites. The most comprehensive .gov framework survey ever. Drupal dominates at 49%. WordPress is 24%. Rails is 11%. Next.js is emerging at 6%. https://pulse.adyog.com/insights/pakistan-shopify-breaks-english-only https://pulse.adyog.com/static/img/stories/pakistan-shopify-breaks-english-only.png?v=20260601 Pakistan Is 34% Shopify. Our 'English-Language Phenomenon' Story Was Incomplete. We said Shopify was an English-language phenomenon. Pakistan — where English is an official but second language — has a higher Shopify rate than the UK. https://pulse.adyog.com/insights/iran-93-percent-wordpress-sanctions https://pulse.adyog.com/static/img/stories/iran-93-percent-wordpress-sanctions.png?v=20260601 Iran Is 93% WordPress. The Same Pattern as Turkey, but With Sanctions. 174 detected .ir sites. 93% WordPress. Isolation — economic and technological — produces digital monoculture. https://pulse.adyog.com/insights/kazakhstan-more-modern-than-germany https://pulse.adyog.com/static/img/stories/kazakhstan-more-modern-than-germany.png?v=20260601 Kazakhstan Has a Higher Next.js Rate Than Germany. Central Asia Is Leapfrogging. 24% Next.js on .kz domains vs 1% on .de. Less legacy means less inertia. The countries with the least to protect are moving fastest. https://pulse.adyog.com/insights/nordic-modern-myth-busted https://pulse.adyog.com/static/img/stories/nordic-modern-myth-busted.png?v=20260601 The Nordic 'Modern Web' Myth: Sweden Is 85% WordPress. Netherlands Is 84%. Spotify and Klarna are modern. The rest of the Nordic web is not. 3,949 .se sites, 9,918 .nl sites — large enough samples to be definitive. https://pulse.adyog.com/insights/ai-domains-67-percent-nextjs https://pulse.adyog.com/static/img/stories/ai-domains-67-percent-nextjs.png?v=20260601 .ai Domains Are 45% Next.js. AI Companies Walk the Walk. The TLD chosen by AI companies is the most modern on the web. 45% run Next.js. 5% run HTMX. WordPress is 42%. At 3,658 detections, the companies building AI chose the infrastructure that matches. https://pulse.adyog.com/insights/the-6-percent-reality https://pulse.adyog.com/static/img/stories/the-6-percent-reality.png?v=20260601 The 5% Reality. At 10 Million Sites, Modern Is Even Smaller Than We Said. At 6.28M, modern frameworks combined were 6.4%. At 10M detections, they're 5.0%. The deeper you scan, the more legacy you find. Updated with 10M data. https://pulse.adyog.com/insights/joomla-60k-still-not-dead https://pulse.adyog.com/static/img/stories/joomla-60k-not-dead.png?v=20260601 Joomla: 352,042 Detections. More Than Astro, SvelteKit, Remix, and Gatsby Combined. Among 10M+ sites scanned, the 'dead' framework has more detections than four of the most-hyped modern alternatives combined. https://pulse.adyog.com/insights/angular-enterprise-doesnt-change https://pulse.adyog.com/static/img/stories/angular-enterprise-steady.png?v=20260601 Angular: 165,015 Detections. Enterprise Chose It. Enterprise Doesn't Change. From 500K to 10M, Angular's share stayed at 1.65%. The most stable number in our entire dataset. https://pulse.adyog.com/insights/vue-ecosystem-larger-than-react https://pulse.adyog.com/static/img/stories/vue-ecosystem-vs-react.png?v=20260601 Vue + Nuxt Has More Detections Than React + Next.js Has Standalone React. The Ecosystem Lens Changes the Ranking. 38,342 Vue ecosystem detections vs 16,703 standalone React. But apples-to-apples, React + Next.js dwarfs Vue + Nuxt. The framing changes everything. https://pulse.adyog.com/insights/htmx-anti-framework-signal https://pulse.adyog.com/static/img/stories/htmx-anti-framework.png?v=20260601 HTMX: 11,482 Detections at 10M. The Anti-Framework Registers at Scale. No build step. No virtual DOM. No npm. HTMX is the reaction to framework fatigue — and at 10M scale, it surpassed Gatsby and SvelteKit. https://pulse.adyog.com/insights/django-overtook-squarespace https://pulse.adyog.com/static/img/stories/django-overtook-squarespace.png?v=20260601 Squarespace Overtook Django at 10M. The No-Code Platform Passed the Developer Framework. At 6.28M, Django led Squarespace. At 10M detections, Squarespace has 53,500 vs Django's 40,151. Scale reversed the finding. The long tail favors platforms. https://pulse.adyog.com/insights/wordpress-to-astro https://pulse.adyog.com/static/img/stories/wordpress-to-astro.png?v=20260601 WordPress to Astro: What the Data Actually Shows 11,334 CVEs vs. 3. $38,000/yr vs. $600/yr. The numbers behind the most impactful framework migration available today. https://pulse.adyog.com/insights/top-3-frameworks-87-percent https://pulse.adyog.com/static/img/stories/top-3-frameworks-87-percent.png?v=20260501 Three Frameworks Account for 86.6% of Detected Sites. Everything Else Is a Rounding Error. WordPress (74.3%) + Shopify (7.8%) + Drupal (4.5%) = 86.6%. Twenty-two other frameworks share the remaining 13.4%. https://pulse.adyog.com/insights/wordpress-alone-beats-all-modern https://pulse.adyog.com/static/img/stories/wordpress-alone-beats-all-modern.png?v=20260501 WordPress Alone Has ~8x More Detections Than All Modern Frameworks Combined. 7,427,780 WordPress detections. ~898,000 modern framework detections (5.0% of detected). Among detected sites in our 10M+ scan, the gap is structural. https://pulse.adyog.com/insights/joomla-outnumbers-modern-darlings https://pulse.adyog.com/static/img/stories/joomla-outnumbers-modern-darlings.png?v=20260501 Joomla Outnumbers Astro and SvelteKit Combined. The 'Dead' Framework Isn't Dead. 176,344 Joomla sites vs 20,338 Astro + SvelteKit combined. Developer Twitter doesn't reflect the actual web. https://pulse.adyog.com/insights/shopify-overtook-drupal https://pulse.adyog.com/static/img/stories/shopify-overtook-drupal.png?v=20260501 Shopify Overtook Drupal. A Platform Is Now Bigger Than a Framework. 777,276 Shopify detections (7.8%) vs 444,706 Drupal (4.5%). Commerce ate CMS. The gap is 1.7x at 10M scale. https://pulse.adyog.com/insights/edu-drupal-rails-not-wordpress https://pulse.adyog.com/static/img/stories/edu-drupal-rails-not-wordpress.png?v=20260501 .edu Domains Chose Differently: Drupal 35.7%, Rails 16.4%. Education Didn't Follow the WordPress Playbook. 58,182 .edu domains analyzed. WordPress leads at 38.5% but Drupal (35.7%) and Rails (16.4%) make education the most diverse sector. https://pulse.adyog.com/insights/shopify-english-language-phenomenon https://pulse.adyog.com/static/img/stories/shopify-english-language-phenomenon.png?v=20260501 Shopify Is an English-Language Phenomenon. Non-English Markets Barely Use It. Australia 30% Shopify, UK 18%, Canada 19%. Germany 6%, Japan 6%, Brazil 2%. The ecommerce platform divide follows language, not GDP. https://pulse.adyog.com/insights/china-vue-ecosystem https://pulse.adyog.com/static/img/stories/china-vue-ecosystem.png?v=20260501 China Shows the Highest Vue Detection Rate of Any Country. Evan You's Heritage Shaped an Ecosystem. Among detected .cn domains, Vue.js + Nuxt.js together rank in the top 3. Cultural connections shaped technology adoption patterns. https://pulse.adyog.com/insights/russia-joomla-holdout https://pulse.adyog.com/static/img/stories/russia-joomla-holdout.png?v=20260501 Russia Has 7,189 Joomla Detections — The Largest Joomla Concentration in Our Data. In our Common Crawl scan of 61,005 detected .ru sites, Joomla concentrates heavily in Russian domains. The rest of the world moved on. Russia didn't. https://pulse.adyog.com/insights/korea-angular-culture https://pulse.adyog.com/static/img/stories/korea-angular-culture.png?v=20260501 68% of Detected .kr Sites Run WordPress — But 14% Angular Makes Korea Asia's Enterprise JavaScript Stronghold. Among 5,901 detected .kr domains, Korean web development culture shows unusual diversity. Enterprise JavaScript frameworks have a stronger foothold than anywhere else in Asia. https://pulse.adyog.com/insights/indonesia-unicorns-didnt-trickle-down https://pulse.adyog.com/static/img/stories/indonesia-unicorns-didnt-trickle-down.png?v=20260501 Indonesia Has Gojek, Tokopedia, Traveloka. 87% of Detected .id Sites Run WordPress. The startup ecosystem didn't trickle down. Among 7,497 detected .id domains in our scan, 87% run WordPress — despite the country's tech unicorns running modern stacks. https://pulse.adyog.com/insights/turkey-93-percent-wordpress https://pulse.adyog.com/static/img/stories/turkey-93-percent-wordpress.png?v=20260501 96% of Detected .tr Sites Run WordPress. The Highest Concentration We Measured. 16,224 out of 16,900 detected .tr sites in our Common Crawl scan run WordPress. Among sites where we could detect a framework, a near-monoculture. https://pulse.adyog.com/insights/enterprise-no-dominant-framework https://pulse.adyog.com/static/img/stories/enterprise-no-dominant-framework.png?v=20260501 Enterprise Has No Dominant Web Framework. That's the Finding. 15 enterprise sites scanned: Next.js 6, Drupal 5, WordPress 3, Spring 2, React 2. No consensus. No standard. Every company chose differently. https://pulse.adyog.com/insights/nonprofit-drupal-not-wordpress https://pulse.adyog.com/static/img/stories/nonprofit-drupal-not-wordpress.png?v=20260501 Large Nonprofits Lean Toward Drupal Over WordPress. The Migration Math Is Different. Among 6 major nonprofit sites we scanned: 4 Drupal, 2 WordPress. Too small for definitive claims, but the Drupal pattern aligns with what we see in government. https://pulse.adyog.com/insights/telecom-angular-different-world https://pulse.adyog.com/static/img/stories/telecom-angular-different-world.png?v=20260501 Telecom Chose Angular. Nobody Talks About It. Here's Why It Matters. While every industry debates WordPress vs Next.js, telecom quietly built on Angular and Vue. A completely different technology decision for completely different reasons. https://pulse.adyog.com/insights/ecommerce-shopify-is-the-story https://pulse.adyog.com/static/img/stories/ecommerce-shopify-is-the-story.png?v=20260501 In Ecommerce, the Real Framework Battle Isn't WordPress vs Next.js. It's Shopify vs Everyone. 3,449 Shopify detections in Common Crawl. The ecommerce infrastructure decision has already been made — by Shopify. https://pulse.adyog.com/insights/healthcare-fragmented-infrastructure https://pulse.adyog.com/static/img/stories/healthcare-fragmented-infrastructure.png?v=20260501 Healthcare's Web Problem Isn't WordPress. It's Fragmentation. Among 17 healthcare sites we scanned: Drupal, WordPress, Next.js, Vue, Angular — no dominant framework. A small sample, but the fragmentation pattern is the finding. https://pulse.adyog.com/insights/media-exactly-split https://pulse.adyog.com/static/img/stories/media-exactly-split.png?v=20260501 Media Shows a 50/50 Split Between Modern and Legacy in Our 28-Site Sample. 28 major media sites scanned globally. WordPress: 14. Next.js: 14. A small but striking sample that suggests an industry mid-migration. https://pulse.adyog.com/insights/education-slowest-to-move https://pulse.adyog.com/static/img/stories/education-slowest-to-move.png?v=20260501 Universities May Be the Slowest-Moving Institutions on the Web. Our Sample Suggests Why. 38 university and education sites scanned — a small sample, but 76% legacy across every region. ASEAN education: 93% legacy. The pattern is consistent. https://pulse.adyog.com/insights/government-drupal-not-wordpress https://pulse.adyog.com/static/img/stories/government-drupal-not-wordpress.png?v=20260501 Government Runs Drupal More Than WordPress. That's a Different Problem. Among 49 government sites we scanned across 6 regions, Drupal dominates — not WordPress. A directional finding from a small but curated sample. https://pulse.adyog.com/insights/nordics-vs-rest-of-eu https://pulse.adyog.com/static/img/stories/nordics-vs-rest-of-eu.png?v=20260501 Nordic TECH Companies Run Modern. The Nordic WEB Does Not. The Distinction Matters. Spotify and Klarna run Next.js. But .se is 86% WordPress, .nl is 83%, .dk is 78%. The EU's digital divide isn't North vs South — it's funded tech vs everything else. https://pulse.adyog.com/insights/eu-auto-digital-paradox https://pulse.adyog.com/static/img/stories/eu-auto-digital-paradox.png?v=20260501 Europe's Auto Giants Invest €50B in Digital. Their Websites Run Legacy CMS. BMW, Mercedes, VW, Renault — we scanned them all. The gap between industrial ambition and web infrastructure is striking. https://pulse.adyog.com/insights/us-nonprofits-most-vulnerable https://pulse.adyog.com/static/img/stories/us-nonprofits-most-vulnerable.png?v=20260501 US Nonprofits: Defending Digital Rights on Digital Legacy ACLU on WordPress. EFF on Drupal. The organizations defending digital rights are running on legacy infrastructure. https://pulse.adyog.com/insights/us-ivy-league-wordpress https://pulse.adyog.com/static/img/stories/us-ivy-league-wordpress.png?v=20260501 Stanford and Harvard Run WordPress. Their CS Graduates Build on Next.js. The institutions that teach the next generation of developers run their own websites on the framework their graduates would never choose. https://pulse.adyog.com/insights/us-fintech-vs-government https://pulse.adyog.com/static/img/stories/us-fintech-vs-government.png?v=20260501 US Fintech: 100% Modern. US Government: 100% Legacy. Same Country, Different Centuries. We scanned both sectors. Stripe, Plaid, Robinhood — all Next.js. whitehouse.gov, NASA, IRS, EPA — all WordPress or Drupal. https://pulse.adyog.com/insights/singapore-government-benchmark https://pulse.adyog.com/static/img/stories/singapore-government-benchmark.png?v=20260501 Singapore Government: 100% Modern Infrastructure. The Regional Benchmark. We scanned tech.gov.sg and gov.sg. Both run Next.js. Singapore proves modern government infrastructure is achievable. https://pulse.adyog.com/insights/indian-fintech-100-modern https://pulse.adyog.com/static/img/stories/indian-fintech-100-modern.png?v=20260501 Indian Fintech: 100% Modern. The Same Pattern as London. PhonePe, CRED, Groww — we scanned them. Every Indian fintech runs modern frameworks. The UPI ecosystem enforces quality. https://pulse.adyog.com/insights/grab-wordpress-surprise https://pulse.adyog.com/static/img/stories/grab-wordpress-surprise.png?v=20260501 Grab Serves Millions of Users. Our Scanner Says It Runs WordPress. Southeast Asia's largest super-app — ride-hailing, food delivery, payments — has a marketing site on legacy CMS. The infrastructure divide runs inside companies too. https://pulse.adyog.com/insights/uk-fintech-100-percent-nextjs https://pulse.adyog.com/static/img/stories/uk-fintech-100-percent-nextjs.png?v=20260501 UK Fintech Is 100% Modern. We Scanned Every Major One. Wise, Monzo, Starling — we scanned them all. Every single UK fintech runs Next.js. Not one runs legacy CMS. https://pulse.adyog.com/insights/india-gov-ahead-of-us https://pulse.adyog.com/static/img/stories/india-gov-ahead-of-us.png?v=20260501 India's Government Website Runs Next.js. America's Runs WordPress. We scanned india.gov.in and whitehouse.gov. India modernized. The US didn't. The data is in our scanner. https://pulse.adyog.com/insights/eu-digital-sovereignty-infrastructure https://pulse.adyog.com/static/img/stories/eu-digital-sovereignty-infrastructure.png?v=20260501 Europe Wants Digital Sovereignty. Its Infrastructure Depends on American Platforms. The EU's digital sovereignty agenda collides with the reality that most European web infrastructure runs on US-built frameworks and platforms. https://pulse.adyog.com/insights/german-auto-digital-paradox https://pulse.adyog.com/static/img/stories/german-auto-digital-paradox.png?v=20260501 Germany Builds Precision Cars. Its Corporate Websites Run Legacy CMS. BMW, Mercedes, VW invest billions in digital transformation. Their public web infrastructure tells a different story. https://pulse.adyog.com/insights/gdpr-legacy-infrastructure-gap https://pulse.adyog.com/static/img/stories/gdpr-legacy-infrastructure-gap.png?v=20260501 GDPR Was a Data Law. It Became an Infrastructure Law. Europe's data protection regulation is forcing infrastructure decisions. Legacy CMS was never built for data subject rights at scale. https://pulse.adyog.com/insights/aunz-apra-cps234-driver https://pulse.adyog.com/static/img/stories/aunz-apra-cps234-driver.png?v=20260501 APRA CPS 234: How Australian Financial Regulation Is Forcing Infrastructure Decisions Australia's prudential regulator requires financial entities to maintain security capability commensurate with threats. Legacy infrastructure makes that harder every year. https://pulse.adyog.com/insights/us-state-gov-digital-divide https://pulse.adyog.com/static/img/stories/us-state-gov-digital-divide.png?v=20260501 50 States, 50 Different Digital Centuries California modernized. Mississippi didn't. The digital divide between US state governments mirrors — and may widen — the economic divide. https://pulse.adyog.com/insights/us-hipaa-wordpress-reckoning https://pulse.adyog.com/static/img/stories/us-hipaa-wordpress-reckoning.png?v=20260501 American Healthcare on WordPress: The HIPAA Reckoning is Coming Thousands of US medical practices run patient-facing services on WordPress. The OCR is increasing enforcement. The math doesn't work. https://pulse.adyog.com/insights/sea-grab-shopee-modern https://pulse.adyog.com/static/img/stories/sea-grab-shopee-modern.png?v=20260501 Grab, Shopee, Tokopedia: SE Asia's Super-Apps All Run Modern The region's most successful digital companies chose modern frameworks. Not one runs legacy CMS. The market is sending a signal. https://pulse.adyog.com/insights/sea-next-billion-choice https://pulse.adyog.com/static/img/stories/sea-next-billion-choice.png?v=20260501 Southeast Asia's Next Billion Websites Don't Have to Run WordPress The region's digital economy is being built right now. Every framework choice made today becomes tomorrow's legacy or tomorrow's advantage. https://pulse.adyog.com/insights/aunz-census-lesson https://pulse.adyog.com/static/img/stories/aunz-census-lesson.png?v=20260501 Australia's Census Failure: What Legacy Infrastructure Costs a Nation The 2016 census failure cost A$30M+ and damaged public trust. It was a legacy infrastructure event with national consequences. https://pulse.adyog.com/insights/us-federal-legacy-100b https://pulse.adyog.com/static/img/stories/us-federal-legacy-100b.png?v=20260501 The US Government Spends $100 Billion a Year Maintaining Legacy Systems More than 80% of the federal IT budget goes to keeping old systems alive. That's not modernization — that's life support paid by taxpayers. https://pulse.adyog.com/insights/uk-fintech-modern-stack https://pulse.adyog.com/static/img/stories/uk-fintech-modern-stack.png?v=20260501 London's Fintech Sector Runs Zero WordPress. Here's Why. Revolut, Wise, Monzo, Starling — the UK's fastest-growing financial companies all chose modern frameworks. Not one runs legacy CMS. https://pulse.adyog.com/insights/uk-govuk-model https://pulse.adyog.com/static/img/stories/uk-govuk-model.png?v=20260501 What GOV.UK Got Right That Other Governments Haven't GOV.UK is the gold standard for digital government. Built on modern infrastructure, designed for citizens, not bureaucrats. Here's what makes it different. https://pulse.adyog.com/insights/india-it-services-paradox https://pulse.adyog.com/static/img/stories/india-it-services-paradox.png?v=20260501 India Builds Modern for the World. It Runs Legacy at Home. Indian IT services companies build cutting-edge systems for global clients. Their own internal infrastructure tells a different story. https://pulse.adyog.com/insights/india-upi-vs-wordpress https://pulse.adyog.com/static/img/stories/india-upi-vs-wordpress.png?v=20260501 India Built UPI on Modern Infrastructure. Why Are Indian Websites Still on WordPress? India proved you can build world-class digital infrastructure from scratch. The same ambition hasn't reached the web layer yet. https://pulse.adyog.com/insights/structured-data-competitive-advantage https://pulse.adyog.com/static/img/stories/structured-data-competitive-advantage.png?v=20260501 Structured Data Is the New Competitive Advantage JSON-LD, OpenAPI, RSS, semantic HTML — the organizations that structure their data for machine consumption are winning the AI era. https://pulse.adyog.com/insights/mcp-agents-api-first https://pulse.adyog.com/static/img/stories/mcp-agents-api-first.png?v=20260501 MCP, Tool Use, Function Calling: The Web Is Becoming an API Layer for AI AI agents don't browse — they call functions. The Model Context Protocol is turning websites into tools. Is your infrastructure ready to be called? https://pulse.adyog.com/insights/llms-consume-web-differently https://pulse.adyog.com/static/img/stories/llms-consume-web-differently.png?v=20260501 How LLMs Actually Consume the Web — And What Your Framework Choice Means Language models don't render CSS. They parse structure. The framework that produces the cleanest HTML wins the AI discovery layer. https://pulse.adyog.com/insights/we-scanned-91-sites https://pulse.adyog.com/static/img/stories/we-scanned-91-sites.png?v=20260501 We Scanned 342 Major Websites. Next.js Has Overtaken WordPress. Original research: Next.js at 42%, WordPress at 16%, legacy vs modern at 30% vs 70%. The shift has happened. https://pulse.adyog.com/insights/edge-computing-advantage https://pulse.adyog.com/static/img/stories/edge-computing-advantage.png?v=20260501 The Edge Advantage: Why Modern Frameworks Win on Speed, Cost, and Reach Edge computing changed the economics of web infrastructure. Legacy frameworks can't take advantage. Modern ones were built for it. https://pulse.adyog.com/insights/future-ready-checklist https://pulse.adyog.com/static/img/stories/future-ready-checklist.png?v=20260501 The Future-Ready Checklist: 10 Questions Every CTO Should Answer A diagnostic for organizational infrastructure health. If you can't answer these confidently, your stack needs attention. https://pulse.adyog.com/insights/migration-success-playbook https://pulse.adyog.com/static/img/stories/migration-success-playbook.png?v=20260501 The Migration Playbook: How Organizations Actually Move Off Legacy Not a technical guide. A business playbook for the executives who approve the budget and the teams who execute the transition. https://pulse.adyog.com/insights/ai-native-companies-stack https://pulse.adyog.com/static/img/stories/ai-native-companies-stack.png?v=20260501 What AI-Native Companies Build On (And Why It Matters) The companies born in the AI era didn't inherit legacy. They chose from scratch. Here's what they chose and why. https://pulse.adyog.com/insights/modern-stack-roi https://pulse.adyog.com/static/img/stories/modern-stack-roi.png?v=20260501 The ROI of Modern Infrastructure: What the Numbers Actually Show Performance gains, cost reduction, developer velocity, security improvement — quantified across real migrations. https://pulse.adyog.com/insights/stripe-bbc-cloudflare-why-nextjs-astro https://pulse.adyog.com/static/img/stories/stripe-bbc-cloudflare-why-nextjs-astro.png?v=20260501 Why Stripe, BBC, and Cloudflare Chose Modern Frameworks The companies building the web's infrastructure made deliberate framework decisions. Here's the business logic behind each one. https://pulse.adyog.com/insights/vendor-lock-sap-oracle https://pulse.adyog.com/static/img/stories/vendor-lock-sap-oracle.png?v=20260501 The Vendor Lock: When Your Infrastructure Belongs to Someone Else SAP, Oracle, Salesforce — enterprise platforms that cost more every year and get harder to leave every quarter. The subscription trap at scale. https://pulse.adyog.com/insights/ai-cant-talk-to-legacy https://pulse.adyog.com/static/img/stories/ai-cant-talk-to-legacy.png?v=20260501 AI Can't Talk to Your Legacy Systems. That's About to Be a Problem. AI agents need APIs, structured data, and clean interfaces. Legacy systems offer none of these. The integration gap is the next competitive divide. https://pulse.adyog.com/insights/custom-app-nobody-understands https://pulse.adyog.com/static/img/stories/custom-app-nobody-understands.png?v=20260501 The Custom App Nobody Understands: A $2.4 Million Annual Risk Every organization has one. The critical internal application where the original developer left and the documentation doesn't exist. https://pulse.adyog.com/insights/cobol-java-python2 https://pulse.adyog.com/static/img/stories/cobol-java-python2.png?v=20260501 COBOL, Java 8, Python 2: The Three Horsemen of Legacy Three technology generations that still run critical infrastructure. One has no new developers. One stopped receiving updates. One was officially sunset in 2020. https://pulse.adyog.com/insights/the-legacy-iceberg https://pulse.adyog.com/static/img/stories/the-legacy-iceberg.png?v=20260501 The Legacy Iceberg: What's Below the Waterline WordPress is the visible 43%. Beneath it: millions of custom apps, enterprise systems, and internal tools built for a world that no longer exists. https://pulse.adyog.com/insights/global-framework-map https://pulse.adyog.com/static/img/stories/global-framework-map.png?v=20260501 The Global Framework Map: Where Legacy Is Most Entrenched Framework adoption varies dramatically by region. Developing markets are most dependent on the web's most vulnerable infrastructure. https://pulse.adyog.com/insights/healthcare-on-wordpress https://pulse.adyog.com/static/img/stories/healthcare-on-wordpress.png?v=20260501 Healthcare Websites on WordPress: Patient Data Behind 18,005 CVEs Medical practices, hospitals, and health systems running patient-facing services on the web's most-attacked framework. https://pulse.adyog.com/insights/talent-crisis-wordpress https://pulse.adyog.com/static/img/stories/talent-crisis-wordpress.png?v=20260501 The WordPress Talent Crisis: Shrinking Supply, Rising Costs, Declining Skills New developers aren't learning WordPress. Experienced developers are leaving. The talent economics are shifting against legacy frameworks. https://pulse.adyog.com/insights/government-sites-last-to-move https://pulse.adyog.com/static/img/stories/government-sites-last-to-move.png?v=20260501 Government Sites: Running a Nation's Web on 18,005 CVEs The White House runs WordPress. So do thousands of government agencies worldwide. Public infrastructure on a legacy foundation. https://pulse.adyog.com/insights/plugin-roulette https://pulse.adyog.com/static/img/stories/plugin-roulette.png?v=20260501 Plugin Roulette: 27 Doors, and You Don't Know Which Ones Are Locked The average WordPress site runs 27 plugins. Each one is an independent attack surface with its own update cycle, its own maintainer, and its own risk profile. https://pulse.adyog.com/insights/what-ai-agents-see https://pulse.adyog.com/static/img/stories/what-ai-agents-see.png?v=20260501 What AI Agents See When They Visit Your Site We ran WordPress and Astro pages through view-source and measured the HTML. The structural difference is measurable. https://pulse.adyog.com/insights/what-happens-if-no-change https://pulse.adyog.com/static/img/stories/what-happens-if-no-change.png?v=20260501 Year 1, Year 3, Year 5: What Happens to Sites That Don't Migrate The compounding cost of staying on legacy frameworks. A timeline of escalating risk. https://pulse.adyog.com/insights/true-cost-of-wordpress https://pulse.adyog.com/static/img/stories/true-cost-of-wordpress.png?v=20260501 The True Cost of Running WordPress: $4,200 to $38,000 Per Year Per Site It's free to download. It's not free to run. We calculated what nobody talks about. https://pulse.adyog.com/insights/scenario-ecommerce-speed https://pulse.adyog.com/static/img/stories/scenario-ecommerce-speed.png?v=20260501 Scenario: The Revenue Impact of Site Speed — What Published Research Shows Not our data. Published research from Google, Akamai, and Deloitte on the measurable revenue impact of load time. https://pulse.adyog.com/insights/scenario-government-drupal https://pulse.adyog.com/static/img/stories/scenario-government-drupal.png?v=20260501 Scenario: A Government Agency Moving from Drupal 7 to Next.js A modeled scenario based on published federal IT data and Drupal's actual EOL timeline. https://pulse.adyog.com/insights/scenario-media-publisher https://pulse.adyog.com/static/img/stories/scenario-media-publisher.png?v=20260501 Scenario: What Happens When a Publisher Migrates 12 Sites from WordPress to Astro A modeled migration scenario using published industry benchmarks. Every number is sourced or derived from our scoring data. https://pulse.adyog.com/insights/five-frameworks-ai-web https://pulse.adyog.com/static/img/stories/five-frameworks-ai-web.png?v=20260501 5 Frameworks Built for the AI-First Web Starting a new project? These are the frameworks that score highest on what matters next. https://pulse.adyog.com/insights/hidden-cost-of-legacy https://pulse.adyog.com/static/img/stories/hidden-cost-of-legacy.png?v=20260501 The Hidden Cost of Legacy Frameworks Security patching, plugin maintenance, hosting overhead — the costs nobody talks about. https://pulse.adyog.com/insights/companies-that-moved https://pulse.adyog.com/static/img/stories/companies-that-moved.png?v=20260501 The Companies That Already Moved BBC, Stripe, Cloudflare, Notion — we scanned 25 major sites. Here's what they chose. https://pulse.adyog.com/insights/ai-readiness-explained https://pulse.adyog.com/static/img/stories/ai-readiness-explained.png?v=20260501 What AI-Readiness Means for Your Framework We introduced a new scoring dimension. Here's why it matters more than performance. https://pulse.adyog.com/insights/wordpress-43-percent https://pulse.adyog.com/static/img/stories/wordpress-43-percent.png?v=20260501 WordPress Powers 43% of the Web (W3Techs). It Scores 45 Out of 100. The most widely deployed framework (W3Techs) is also one of its most vulnerable. Here's what the data says.